The splunk service accepts connections encrypted using SSL 2.0 and/or SSL 3.0.

[wardsd]

I have a cyber security finding that states "The splunk service accepts connections encrypted using SSL 2.0 and/or SSL 3.0".  Of course SSL 2.0 and 3.0 are not secure protocols.  How do I disable SSL 2.0/3.0?  Can I just disable it in the browser or do I need to change a setting within splunk?

[isoutamo]

The easiest way is just create an own app where you add needed configuration files with correct attributes. Then install that app to all nodes where it is needed. 

In server.conf

[sslConfig]
sslVersions = tls1.2
sslVersionsForClient = tls1.2

In web.conf

[settings]
sslVersions = tls1.2

Put those conf files into your app's default folder with other needed confs. Then just install It into servers.

r. Ismo

[sainag_splunk]

Yes, you can do it on multiple conf files in splunk for example: Serverconf Webconf  Outputsconf

Please refer:   https://docs.splunk.com/Documentation/Splunk/latest/Admin/Serverconf#TLS.2FSSL_Configuration_details